1The information in relation to the processing of personal data relating to the data subject should be given to him or her at the time of collection from the data subject, or, where the personal data are obtained from another source, within a reasonable period, depending on the circumstances of the case. 2Where personal data can be legitimately disclosed to another recipient, the data subject should be informed when the personal data are first disclosed to the recipient. 3Where the controller intends to process the personal data for a purpose other than that for which they were collected, the controller should provide the data subject prior to that further processing with information on that other purpose and other necessary information. 4Where the origin of the personal data cannot be provided to the data subject because various sources have been used, general information should be provided.
* This title is an unofficial description.
Why Recital 61 Matters for GDPR Compliance?
Recital 61 explains when individuals must be informed about the processing of their personal data. Information should be provided at the time of data collection or within a reasonable period if the data comes from another source. It also requires informing individuals before data is shared with third parties or used for a new purpose, ensuring transparency throughout the data lifecycle.